Roles
Every membership in a Vox101 organisation has exactly one role:
| Role | What it grants |
|---|---|
| User | Sign in, create and run events, manage personal and shared vocabularies, view organisation devices. |
| Admin | Everything a User can do, plus all the actions described in this guide: invite users, change roles, reset passwords for others, rename and link devices. |
The role lives on the membership link between a user and a organisation — so the same user can hold different roles in different organisations they belong to.
Promoting and demoting
From the Users page you can promote a User to Admin or demote an Admin to User. The change takes effect on the user's next authenticated request; if they're already signed in, they may need to refresh.
The "last admin" rule
An organisation must always have at least one Admin. If you try to demote the only remaining Admin to User, the change is rejected with the message:
Cannot change role. There must be at least one admin.
The same rule prevents you from accidentally demoting yourself out of admin if no one else holds the role.
To safely transfer ownership, promote someone else first, then demote yourself.
What the role does not control
Roles only affect organisation-management actions and a subset of device actions. They do not restrict access to specific events, vocabularies, or recordings — those are governed by ownership and the Shared flag on vocabularies. A User cannot edit another user's private vocabulary regardless of role.